Passly Careers — Applicant Privacy Notice

How we handle your information

Last updated: 5 October 2026 Passly Events and Ticketing Limited is responsible for personal information used through careers.passly.co.ke for recruitment, Event Crew opportunities and optional role alerts. Our Careers privacy contact is Nelson Lobor. Contact privacy@passly.co.ke for questions or rights requests, or lobornelson@passly.co.ke to escalate a request. Information we collect Depending on the opportunity and stage, we collect your name, email, optional telephone number, CV, professional or portfolio links, experience, qualifications and application answers. Recruitment records may include assessments, interview arrangements and feedback, references, offers, acceptance decisions and relevant onboarding or work-relationship information. Event Crew opportunities may require relevant verification documents and eligibility information. We also record application status, notice versions, consent preferences, delivery events and necessary security/access records. Information comes from you and, where relevant, referees, referrals and our hiring team. Provide only information relevant to the opportunity. We will explain additional sensitive-information requirements before requesting them. How we use information We use information to assess applications, communicate decisions, arrange recruitment activities and take steps towards a possible work relationship at your request. Relevant processing may also meet applicable legal obligations or support a legitimate interest in fair recruitment, security and accountability, subject to your rights. Optional role alerts rely on separate consent. Applying does not automatically subscribe you. You may unsubscribe using the link in an alert email; this does not affect an application. Required information is needed for the relevant recruitment stage; without it we may be unable to continue. Access and service providers Relevant information is available to authorized hiring, operations and privacy personnel according to their responsibilities. We use Supabase for account authentication and profile storage, Convex for recruitment records/private documents, Vercel for website hosting, Cloudflare for email infrastructure and Google Workspace/Gmail for recruitment email. Relevant information may be shared with referees or professional advisers where necessary, or disclosed where required by law. We do not sell applicant information. International processing Cloud and email providers may process information outside Kenya. International processing is subject to applicable Kenyan data-protection requirements. Contact privacy@passly.co.ke for information about arrangements relevant to your records. Retention We retain information for the recruitment or work-related purpose for which it is needed, applicable legal obligations and relevant complaints or disputes. For unsuccessful/withdrawn applications we consider whether recruitment has concluded, whether a complaint or follow-up remains open and whether a specific lawful reason supports retention. Event Crew records are reviewed according to current membership or a work relationship. Hired records may form part of employment/contractual records. Role-alert information is used while subscribed; after unsubscribe we stop alerts and retain only information still necessary to honor that choice or meet an obligation. Private documents are reviewed with their corresponding application or relationship. Provider/email copies, backups, lawful holds and privacy restrictions are considered separately. Information no longer necessary is disposed of appropriately. You may ask about the criteria applying to your records. Your rights Subject to applicable law, you may ask about use of your information, request access or correction, object to processing, request deletion where applicable, or withdraw optional consent. Email privacy@passly.co.ke with enough information to identify your application or subscription. Do not send passwords, sign-in codes or unnecessary identity documents. We may require proportionate identity verification and will explain lawful limits to a request. Use your secure application link for supported actions or contact us if it is unavailable. Unsubscribing does not withdraw an application; withdrawing does not automatically unsubscribe from alerts. You may lodge a complaint with Kenya’s Office of the Data Protection Commissioner (ODPC) at complaint@odpc.go.ke or https://www.odpc.go.ke/file-a-complaint/. Security and updates We use access controls, staff authentication and private-document controls to help protect information. Keep application links and sign-in codes private and report suspected misuse. We may update this notice when activities or service arrangements change, show the updated date and communicate material changes where appropriate. The notice version associated with an application is recorded.